I'm not a particular fan of many of the UI choices for SSL sites in Firefox 3 anyway, but what I really don't unterstand at all, is why browser.identity.ssl_domain_display = 1 has not always been a default. (Setting this through about:config will make Firefox display the domain name in the favicon field, similar to what it does for sites using an extended validation certificate.)